last executing test programs: 6.669673743s ago: executing program 4 (id=548): socket(0x11, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.51820092s ago: executing program 4 (id=550): r0 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000014c0), &(0x7f0000001500)=0x8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073"], 0xec}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 5.007887214s ago: executing program 1 (id=561): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x2400) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000040)={0x3, 0xffffffff, 0x83c3, 0x3, 0x6, 0xffff}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x464, 0x200, 0x70bd29, 0x25dfdbfb, "5216016f0511eb10484f4e96d07c515b4a1bb851975a7e622f518adb794331d6f658276c00db935b2dc87a4fe5e698d10ee7f3d7f44ad17317c16325d3ea3bd2f5c38900fd0c", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000200)={0xff, 0x2, 0x7fff, 0x10001, 0xfffffffd}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000240)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x7}, 0x4) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000002c0)=0x10001) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000300)="5fc40a838b7499f0a1b404751367b813e7b103981fa5187d59", 0x19}, {&(0x7f0000000340)="306358c82a241af1ba3d890830823b0a8378917d23d7f922e1f405fe41d0afa5633e421392c27d6c3eb0f42a958a348eac44f2ced5b2f8dd57f692d8cd223292d7b3dc2015fd22b2f8182a9a8daee5049abbb86fa9901f0b2df93ddb29cf540eacd6a1833d1744199338ce23c1b62cb560396245f3b034128d28d74fba7ad1819cb87b2782150cf7e3d9674a6789dbe8f981fd53af7a813d", 0x98}, {&(0x7f0000000400)="52942fcd5e7f74c12d5f007c4d2eda13a5e92b4b9f7b34eec9e08e8b0932c8534fa04ca836a1b125d0e761e3d0ae3258e13c7e6b4a585694db17f70913564a3e372dcd73cbca540cb650e39960abb2455a3485c406ed0128da59568d91da3043f27a0f0e6c428643a096f11ae00f9a26ed92", 0x72}, {&(0x7f0000000480)="9a51d4bd67d19eb5d39f29b04f8d333382c9cf789fda031e2fbb9d259493800531a22717febf470aa6e6", 0x2a}], 0x4) unshare(0x2000400) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) splice(r2, &(0x7f0000000540)=0x100, r1, &(0x7f0000000580)=0x6, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x20040014) clock_gettime(0x0, &(0x7f00000048c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000047c0)=[{{&(0x7f0000000700)=@ax25={{0x3, @null}, [@null, @remote, @netrom, @default, @null, @default, @remote, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000780)=""/5, 0x5}, {&(0x7f00000007c0)=""/156, 0x9c}, {&(0x7f0000000880)=""/58, 0x3a}, {&(0x7f00000008c0)=""/127, 0x7f}, {&(0x7f0000000940)=""/190, 0xbe}, {&(0x7f0000000a00)=""/125, 0x7d}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/242, 0xf2}, {&(0x7f0000000c00)=""/13, 0xd}], 0x9, &(0x7f0000000d00)=""/234, 0xea}, 0x6}, {{&(0x7f0000000e00)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000e80)=""/116, 0x74}, {&(0x7f0000000f00)=""/16, 0x10}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/122, 0x7a}, {&(0x7f0000001fc0)=""/124, 0x7c}], 0x5}, 0x2be40000}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000020c0)=""/74, 0x4a}, {&(0x7f0000002140)=""/181, 0xb5}, {&(0x7f0000002200)=""/58, 0x3a}, {&(0x7f0000002240)=""/201, 0xc9}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x5, &(0x7f00000033c0)=""/206, 0xce}, 0xfff}, {{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000034c0)=""/187, 0xbb}, {&(0x7f0000003580)=""/9, 0x9}, {&(0x7f00000035c0)=""/127, 0x7f}, {&(0x7f0000003640)=""/170, 0xaa}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/40, 0x28}], 0x6}, 0x3}], 0x4, 0x40, &(0x7f0000004900)={r4, r5+10000000}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) r6 = openat2(r2, &(0x7f0000004940)='./file0\x00', &(0x7f0000004980)={0x400, 0x59, 0x2}, 0x18) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f00000049c0)) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x2) ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000004a00)=0x0) prlimit64(r8, 0x9, &(0x7f0000004a40)={0x3, 0x9}, &(0x7f0000004a80)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004ac0), &(0x7f0000004b00)=0xc) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000004b40)) ioctl$KDSKBLED(r2, 0x4b65, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004bc0), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000004d00)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c00)={0xa4, r9, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x16, 0x34, @random="f584a00dda8894a29b0b7a803236e8f37717"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x74c}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x14}, @NL80211_ATTR_PMKID={0x14, 0x55, "92ed53b964a7c17f0687b341b368970f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3e}, @NL80211_ATTR_PMK={0x14, 0xfe, "8c99adfd72ad2f6492509dc2321e8dbe"}, @NL80211_ATTR_PMK={0x14, 0xfe, "466e19246d794236cdeefd358c83d80d"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f613713dc16b"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x37}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000884}, 0x41) 4.879366411s ago: executing program 1 (id=562): creat(0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x4) 4.629812993s ago: executing program 1 (id=563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r5, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xc397e) 4.434513462s ago: executing program 4 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x10808, &(0x7f0000000c00), 0x1, 0xb88, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5/UNAuxoMYE2o8QGLYtoCCxAN4NB5MJEFPuPYHaVjA0JpYQmK5mXhRgydPntREj14NMerJg9ET/4EhIabwB9TM7GxZ292WwpYh5fNJZve9eSzvO02++9503nQCeGKNZS9pxL6I+DyJGC32pxExmJeGI5Za/+7u8tWpbEtiZeWdf5NIIuLO8tWp9v+VFO+7s5dq/sn465eIZyrr+51fvHK+0WzOXC7q4wsXPhyfX7xyaO5C49zMuZmLh1+dODL52tHjrxy996HhhzvWxWPpZ3+++cZ3189+/cePx1/4NImTsado6zyOfhmLsdWfSadqRLzX785KUimOp9txAgDw+Ek75nD7YjQqeallNOpzpQYHAAAA9MUnEbECAAAA7HCJ838AAADY4drrAO4sX51qb+WuSAAeldunIqLWyv/2/f2tlmos5e/DMRARI3eTjjuDWvd71/rQ/1hE/PDVsf3ZFtt0Hz7Q3dK1iHiu2/if5PlfK/7oxtr8TyNiog/9j62py394dLrlf+u8YPP8P9mH/uU/AAAAAAAA9M+NU60L+euv/6er63+iy/W/Spdrdw9i8+t/6a0+dAN0cftUxOsdz/a525H/hVqlqD2VrwcYSGbnmjMTEfF0RByMgaGsPrlBH9/+dOLvXm2d6/+yLeu/vRawiONWdej/n5luLDQe5piBltvXIp6vdsv/ZHX8T3qs/337Pvv47czPs73aNs9/YLusfBNxoOv4f++JbsnGz+cbz+cD4+1ZwXpnXvz1+179y38oTzb+j2yc/7Wk83md81vvY2Lk0LlebQ86/x9MTudPFR0s9n3cWFi4PBkxmLy1fv/hrccMO1E7H9r5kuX/wZe6n/9vNP/Pkuz94lsijYhG8Z7VP1jT59DZ37/oFY/xH8qT5f/0lsb/rRe+fHf5dK/+72/8P5qP6QeLPX7/Bxu73wQtO04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nKQRsSeStL5aTtN6PWJ3RDwbI2nz0vzCy7OXPro4nbVF1GIgnZ1rzkxExGirnmT1ybx8r354Tf1IROyNiOuju/J6fepSc7rsgwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDV7ojYE0laj4g0L6dpvd5q+2e07OgAAACAvqmVHQAAAACw7Zz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCQ9u6/cTOJiKUTu/ItM1i0DZQaGbDd0rIDAEpTKTsAoDTVsgMASuMcH0g2aR/u2WIGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAkObDvxs0kIpZO7Mq3zGDRNlBqZMB2S8sOAChNpewAgNJUyw4AKI1zfCDZpH24694hMwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ8z84pXzjWZz5rLChoVqRDwGYSgoPKJC2d9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7GT/BQAA//+isv4G") r5 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000280)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$eJzs3E1oXNUeAPD/nUma9Ot1Xl9f32utmlrFYDFp02q7EKSi4EJBrKAuQ5KW2rSRJgVbqkxB6lIK7sWlWxdu1U0RV4LbuhSkUKSbtoI4cmfunZlMZ5ImmWSM+f1gMufcr3POPffcOfeczASwYQ2lf5Ja+GZE7IiIQusGQ7W3e3euTNy/c2UiypXKyd+S6m5303gmO0xszSLDhYjCx0ljRZPZS5fPjk9PT13I4qNz594fnb10+dkzg9mS48ePHjl87Pmx55ZeqDbppeW6u/ejmX17Xn33+usTffnyPLXmcnTLUAy1y0rVU91OrMe2N4WTvh5mhCVJr/+0uvqr7X9HFGOhyiuvYc6A1VapVCoDnVeXK62uPrAEWLdisNc5AHoj/6BPn3/zV7uOwKbV6X703O0TtQegtNz3slfE49WF+ThIf8vzbTcNRcQ75d8/T1+xSuMQAADNvj2R9wRb+n+l2szIHxdvvJi+/yubQylFxL8jYmdE/CcidkXEfyNid0T8LyL+33L8YkRUFkh/qCVeT78+CVW41aWitpX2/17I5rYa/b95GSgVs9j2iLzDPHUoOyfD0T9w6sz01OEF0vju5Z8+7bSuuf+XvtL0875glo9bfS0DdJPjc+PLLnCL21cj9va1lj/pi0jqMwFJROyJiL1LOG6pKXzmmS/31SP987dbvPxVlbbzaF2YZ6p8EfF0rf7LMa/+Gykm8+Ynz42fnjo9dX6sPj85OhjTU4dG06vgUNs0fvjx2hud0l+0/F//0rrLK8e+OZm1rJVL639L0/Uf+fxto/ylJCKpz9fOLj2Naz9/0vGZZrnX/6bkrWo4fy79YHxu7sLhiE3Jaw8uH2vsm8fT9yjXyj98oH3735ntk56JRyIivYgfjYjHovaEmOZ9f0Q8EREHFij/9y89+d7yy7+60vJPttz/ajU/r/4b8/WdAkk2N9hmVfHs/pv3O9w8Hq7+j1ZDw9mS9ve/ZN4tolNO80+7dMmfKz57AAAAsD4UImJb01jStigURkZqY0C7YkthemZ27uCpmYvnJ9N1EaXoL+QjXbXx4P4kH/8sNcXHWuJHsnHjz4qbq/GRiZnpyZ6WHNhabfNJYSTi7WJT+0/92p0hZuDvzPe1YONaqP2nnfjd19cwM8CaevjP/xsfrmpGgDXX1P47fcO/vIz/+wLWAc//QMPiP/TjngHrX0Vbhg1tSe3/oB8BhH+SvnizHi70NCfAWtP/hw1p0e/1ryhQGWi/ajAe3DgGFz5gMZaXjc1t0upJIO1Z9ST1zcvZK/81hY7bRGFpBxyI7tTpqRWejfKF2dO7u37xV7L/le92DX61Ju20XaAntyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICu+ysAAP//+sDgnA==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fsetxattr(r6, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r5, r5, 0x0, 0x800000009) 3.503487038s ago: executing program 1 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nolazytime}, {@noblock_validity}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@nomblk_io_submit}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x181082, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010efc05000039e200000000004dcbfea17e168261fb0000000000"], 0xa) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) 3.235474801s ago: executing program 2 (id=572): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) 3.029112432s ago: executing program 2 (id=573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 2.295856108s ago: executing program 1 (id=574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nolazytime}, {@noblock_validity}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@nomblk_io_submit}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x181082, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010efc05000039e200000000004dcbfea17e168261fb0000000000"], 0xa) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) 2.295611098s ago: executing program 2 (id=575): creat(0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x4) 2.23176575s ago: executing program 2 (id=577): r0 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000014c0), &(0x7f0000001500)=0x8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073"], 0xec}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 1.979556673s ago: executing program 4 (id=579): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) r2 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0xdb4, 0x2000000, 0x0, 0x0, 0x0) 1.100735866s ago: executing program 0 (id=582): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) read(r0, 0x0, 0x0) 1.035185999s ago: executing program 3 (id=583): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r0, &(0x7f0000000380)="2f28205d09847866d997e8244eab83f422b775ac357eff0dd936e157a8d9f82d8ad2aa4c", 0x24) 1.006644401s ago: executing program 4 (id=593): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 901.586446ms ago: executing program 0 (id=584): creat(0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write(0xffffffffffffffff, &(0x7f0000000240)="94", 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r4 = getpid() fcntl$setown(r3, 0x8, r4) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x4) 901.255866ms ago: executing program 3 (id=585): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 863.927888ms ago: executing program 1 (id=586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nolazytime}, {@noblock_validity}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@nomblk_io_submit}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x181082, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3") openat(0xffffffffffffff9c, 0x0, 0x0, 0xd912dbfad8e30d4c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="010efc05000039e200000000004dcbfea17e168261fb0000000000"], 0xa) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) 771.614212ms ago: executing program 0 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) 723.209555ms ago: executing program 0 (id=588): ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 650.231068ms ago: executing program 2 (id=589): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x2a442, 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)={[{@discard}, {@noload}]}, 0x64, 0x544, &(0x7f0000000880)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffff190}, {0x3, 0x0, 0x80, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x70}}, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x2000000000006) io_setup(0xca, &(0x7f0000000100)=0x0) io_submit(r4, 0x3, &(0x7f0000000700)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f00000002c0)="84f633eecb5ff0ba113895dd7d3bc739bfb1b585efde2827ef2a3daca49d2b81c632b7ebb434cbce11", 0x29, 0x39, 0x0, 0x2, r3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0xff, r1, &(0x7f0000000540)="893f96aba9a38e31906c85d0e346b72158e3e736de193857e8e2361fb02347479006d06608f5a8ab813cb4c45fd870a83741ee1d0222f578fa5eee7deccf7a51b2991b1ef93a9f87d87d6eabf39bcda8a45bc24f238fab632c3fea2da549d1c92485811d06a841ebcd4cb020abc98918b7567efebd5576d8ecfc3d415e23090c0a47529231170f168234d849c7fb211f973eec14a9f0aaa64c750c", 0x9b, 0x6, 0x0, 0x0, r3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000640)="a9e7ccc670b4c41b9d78e62f1ee22cd655f8c24371d25cac0427122a39304ca119002bd949b8d3a07528ddeaebef4b8af5e999b3e0fed9b25f21ec6b33d348553b064f4acf71b43317008bf9659ac89ac8fa3bd483d552096f435bb72b1e68e3c7be", 0x62, 0x0, 0x0, 0x3, r3}]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) lseek(r3, 0x8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 624.836319ms ago: executing program 4 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nolazytime}, {@noblock_validity}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@nomblk_io_submit}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x181082, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0xd912dbfad8e30d4c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="010efc05000039e200000000004dcbfea17e168261fb0000000000"], 0xa) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) 509.131135ms ago: executing program 3 (id=591): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 506.656966ms ago: executing program 0 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) 228.263849ms ago: executing program 3 (id=594): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 227.147949ms ago: executing program 0 (id=604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nolazytime}, {@noblock_validity}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@nomblk_io_submit}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="010efc05000039e200000000004dcbfea17e168261fb0000000000"], 0xa) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) 118.046694ms ago: executing program 3 (id=595): socket(0x11, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="120000000600000004000000"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 85.075956ms ago: executing program 3 (id=596): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) r2 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0xdb4, 0x2000000, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=597): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x3, 0x80, 0x7, 0x2, 0x40, 0x40, 0x0, 0x2, 0x1020, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x1, 0x2}, 0x1488, 0xf, 0x9, 0x5, 0x7, 0x200, 0xfff9, 0x0, 0x7, 0x0, 0x7}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r3, 0x4b4a, 0x10000000000004) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. [ 34.584634][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 34.584651][ T28] audit: type=1400 audit(1773851300.830:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.616924][ T28] audit: type=1400 audit(1773851300.860:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.619443][ T3300] cgroup: Unknown subsys name 'net' [ 34.649446][ T28] audit: type=1400 audit(1773851300.900:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.809073][ T3300] cgroup: Unknown subsys name 'cpuset' [ 34.816891][ T3300] cgroup: Unknown subsys name 'rlimit' [ 34.927315][ T28] audit: type=1400 audit(1773851301.170:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.956924][ T28] audit: type=1400 audit(1773851301.180:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.978865][ T28] audit: type=1400 audit(1773851301.180:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.999991][ T28] audit: type=1400 audit(1773851301.180:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.021079][ T28] audit: type=1400 audit(1773851301.200:77): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.042631][ T28] audit: type=1400 audit(1773851301.200:78): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.044142][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.068330][ T28] audit: type=1400 audit(1773851301.200:79): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.128543][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.417354][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.481311][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.499435][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 36.523462][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 36.538625][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.545937][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.553397][ T3312] bridge_slave_0: entered allmulticast mode [ 36.560173][ T3312] bridge_slave_0: entered promiscuous mode [ 36.581080][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.588232][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.595669][ T3312] bridge_slave_1: entered allmulticast mode [ 36.602334][ T3312] bridge_slave_1: entered promiscuous mode [ 36.665573][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.678398][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.693507][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.701073][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.708655][ T3316] bridge_slave_0: entered allmulticast mode [ 36.715474][ T3316] bridge_slave_0: entered promiscuous mode [ 36.725725][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.743251][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.750595][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.758051][ T3316] bridge_slave_1: entered allmulticast mode [ 36.764786][ T3316] bridge_slave_1: entered promiscuous mode [ 36.779272][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.786595][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.794069][ T3311] bridge_slave_0: entered allmulticast mode [ 36.800967][ T3311] bridge_slave_0: entered promiscuous mode [ 36.834543][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.842762][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.850741][ T3311] bridge_slave_1: entered allmulticast mode [ 36.858762][ T3311] bridge_slave_1: entered promiscuous mode [ 36.877048][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.892591][ T3312] team0: Port device team_slave_0 added [ 36.904427][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.912413][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.922521][ T3313] bridge_slave_0: entered allmulticast mode [ 36.930784][ T3313] bridge_slave_0: entered promiscuous mode [ 36.940779][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.956370][ T3312] team0: Port device team_slave_1 added [ 36.968770][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.976674][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.985428][ T3313] bridge_slave_1: entered allmulticast mode [ 36.993784][ T3313] bridge_slave_1: entered promiscuous mode [ 37.023847][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.056208][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.063649][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.071110][ T3318] bridge_slave_0: entered allmulticast mode [ 37.077885][ T3318] bridge_slave_0: entered promiscuous mode [ 37.085568][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.100938][ T3316] team0: Port device team_slave_0 added [ 37.114338][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.124519][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.132017][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.160351][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.172500][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.182013][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.190638][ T3318] bridge_slave_1: entered allmulticast mode [ 37.198124][ T3318] bridge_slave_1: entered promiscuous mode [ 37.206489][ T3311] team0: Port device team_slave_0 added [ 37.214159][ T3311] team0: Port device team_slave_1 added [ 37.220981][ T3316] team0: Port device team_slave_1 added [ 37.228620][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.239181][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.246203][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.273200][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.317347][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.337416][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.344705][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.371745][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.384640][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.393185][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.424362][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.437174][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.445047][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.473121][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.486517][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.497913][ T3313] team0: Port device team_slave_0 added [ 37.513756][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.522307][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.550835][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.567673][ T3313] team0: Port device team_slave_1 added [ 37.586747][ T3312] hsr_slave_0: entered promiscuous mode [ 37.593507][ T3312] hsr_slave_1: entered promiscuous mode [ 37.630205][ T3318] team0: Port device team_slave_0 added [ 37.642708][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.650513][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.679580][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.696506][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.703866][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.732424][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.744832][ T3318] team0: Port device team_slave_1 added [ 37.762978][ T3311] hsr_slave_0: entered promiscuous mode [ 37.769912][ T3311] hsr_slave_1: entered promiscuous mode [ 37.776183][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 37.782396][ T3311] Cannot create hsr debugfs directory [ 37.798760][ T3316] hsr_slave_0: entered promiscuous mode [ 37.805251][ T3316] hsr_slave_1: entered promiscuous mode [ 37.811875][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.817710][ T3316] Cannot create hsr debugfs directory [ 37.833451][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.840772][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.868299][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.882417][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.890277][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.918627][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.982298][ T3313] hsr_slave_0: entered promiscuous mode [ 37.988815][ T3313] hsr_slave_1: entered promiscuous mode [ 37.997667][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 38.003763][ T3313] Cannot create hsr debugfs directory [ 38.071218][ T3318] hsr_slave_0: entered promiscuous mode [ 38.078448][ T3318] hsr_slave_1: entered promiscuous mode [ 38.085032][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 38.090980][ T3318] Cannot create hsr debugfs directory [ 38.210355][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.224411][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.236376][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.247500][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.292756][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.303629][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.314296][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.327134][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.356987][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.369398][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.378824][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.389397][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.439884][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.463112][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.472509][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.481698][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.506786][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.521535][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.532027][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.541626][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.558041][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.565411][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.591066][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.605943][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.619655][ T1636] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.627417][ T1636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.645482][ T1636] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.652972][ T1636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.665320][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.673788][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.681247][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.692812][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.700543][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.733127][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.751096][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.758490][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.787028][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.794534][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.811947][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.892025][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.903288][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.922344][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.932457][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.945801][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.953165][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.980491][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.988290][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.998089][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.005363][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.020114][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.027466][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.040306][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.069715][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.092665][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.224737][ T3312] veth0_vlan: entered promiscuous mode [ 39.241124][ T3312] veth1_vlan: entered promiscuous mode [ 39.258083][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.278856][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.307662][ T3311] veth0_vlan: entered promiscuous mode [ 39.336362][ T3311] veth1_vlan: entered promiscuous mode [ 39.347968][ T3316] veth0_vlan: entered promiscuous mode [ 39.359414][ T3312] veth0_macvtap: entered promiscuous mode [ 39.367473][ T3312] veth1_macvtap: entered promiscuous mode [ 39.384248][ T3316] veth1_vlan: entered promiscuous mode [ 39.405583][ T3311] veth0_macvtap: entered promiscuous mode [ 39.418980][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.434252][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.449544][ T3316] veth0_macvtap: entered promiscuous mode [ 39.463655][ T3311] veth1_macvtap: entered promiscuous mode [ 39.474742][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.492412][ T3316] veth1_macvtap: entered promiscuous mode [ 39.512176][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.522696][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.543581][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.554908][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.577218][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.588675][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 39.588693][ T28] audit: type=1400 audit(1773851305.830:91): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.IUFz3H/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.625000][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.633629][ T28] audit: type=1400 audit(1773851305.830:92): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.667988][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.668474][ T28] audit: type=1400 audit(1773851305.830:93): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.IUFz3H/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.706436][ T3313] veth0_vlan: entered promiscuous mode [ 39.713029][ T28] audit: type=1400 audit(1773851305.870:94): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.738692][ T28] audit: type=1400 audit(1773851305.870:95): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.IUFz3H/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.766472][ T28] audit: type=1400 audit(1773851305.870:96): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.IUFz3H/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.795590][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.796157][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.805653][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.831322][ T28] audit: type=1400 audit(1773851305.870:97): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.846280][ T3318] veth0_vlan: entered promiscuous mode [ 39.857783][ T28] audit: type=1400 audit(1773851305.880:98): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.865052][ T3313] veth1_vlan: entered promiscuous mode [ 39.886897][ T28] audit: type=1400 audit(1773851305.880:99): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=4767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.916636][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.925961][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.940333][ T28] audit: type=1400 audit(1773851306.190:100): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.979291][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.998094][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.016568][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.017361][ C0] hrtimer: interrupt took 229304 ns [ 40.039632][ T3318] veth1_vlan: entered promiscuous mode [ 40.071377][ T3313] veth0_macvtap: entered promiscuous mode [ 40.078795][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.100253][ T3313] veth1_macvtap: entered promiscuous mode [ 40.124834][ T3479] loop2: detected capacity change from 0 to 256 [ 40.138693][ T3483] loop3: detected capacity change from 0 to 512 [ 40.165820][ T3483] EXT4-fs (loop3): 1 truncate cleaned up [ 40.167510][ T3318] veth0_macvtap: entered promiscuous mode [ 40.178908][ T3483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.197088][ T3318] veth1_macvtap: entered promiscuous mode [ 40.206265][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.252228][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.271197][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.299279][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.317065][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.336603][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.359771][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.387998][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.481645][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.481743][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.481781][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.481817][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.642386][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.034272][ T3504] loop4: detected capacity change from 0 to 164 [ 41.171657][ T3507] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 41.320973][ T3509] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 41.348803][ T3505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3505 comm=syz.1.7 [ 41.552335][ T3505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 41.575869][ T3505] erspan0: entered promiscuous mode [ 41.586615][ T3505] erspan0: entered allmulticast mode [ 41.893600][ T1032] IPVS: starting estimator thread 0... [ 41.941850][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 42.020722][ T3518] IPVS: using max 2208 ests per chain, 110400 per kthread [ 42.147655][ T3521] capability: warning: `syz.2.10' uses deprecated v2 capabilities in a way that may be insecure [ 42.191182][ T3520] loop1: detected capacity change from 0 to 512 [ 42.298127][ T3520] EXT4-fs: Ignoring removed nobh option [ 42.555650][ T3520] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.596879][ T3520] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.9: EA inode hash validation failed [ 42.638856][ T3520] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.698109][ T3520] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.9: corrupted inode contents [ 42.743101][ T3520] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.743355][ T3520] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.9: mark_inode_dirty error [ 42.753918][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 42.753939][ C1] EXT4-fs (loop1): initial error at time 1773851308: ext4_do_update_inode:5569: inode 15 [ 42.753977][ C1] EXT4-fs (loop1): last error at time 1773851308: ext4_do_update_inode:5569: inode 15 [ 42.878352][ T3520] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.880198][ T3520] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.9: corrupted inode contents [ 42.973034][ T3525] lo speed is unknown, defaulting to 1000 [ 42.981658][ T3520] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.981855][ T3520] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.9: mark_inode_dirty error [ 43.006426][ T3525] lo speed is unknown, defaulting to 1000 [ 43.058964][ T3539] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 43.080277][ T3527] can: request_module (can-proto-4) failed. [ 43.098393][ T3520] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.098607][ T3520] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.9: mark inode dirty (error -117) [ 43.139574][ T3525] lo speed is unknown, defaulting to 1000 [ 43.174505][ T3520] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.174732][ T3520] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 43.204949][ T3525] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.220361][ T3520] EXT4-fs (loop1): 1 orphan inode deleted [ 43.235317][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.282467][ T3525] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.485624][ T3525] lo speed is unknown, defaulting to 1000 [ 43.524305][ T3525] lo speed is unknown, defaulting to 1000 [ 43.551456][ T3525] lo speed is unknown, defaulting to 1000 [ 43.573209][ T3525] lo speed is unknown, defaulting to 1000 [ 43.597126][ T3525] lo speed is unknown, defaulting to 1000 [ 43.699924][ T3546] loop3: detected capacity change from 0 to 1024 [ 43.707715][ T3546] ======================================================= [ 43.707715][ T3546] WARNING: The mand mount option has been deprecated and [ 43.707715][ T3546] and is ignored by this kernel. Remove the mand [ 43.707715][ T3546] option from the mount to silence this warning. [ 43.707715][ T3546] ======================================================= [ 43.755632][ T3546] EXT4-fs: inline encryption not supported [ 43.763111][ T3546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.781992][ T3546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.814162][ T3515] syz.1.9 (3515) used greatest stack depth: 10376 bytes left [ 43.862304][ T3553] loop0: detected capacity change from 0 to 1024 [ 43.898463][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.919924][ T3553] EXT4-fs: inline encryption not supported [ 43.926913][ T3553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.935765][ T3525] syz.2.11 (3525) used greatest stack depth: 9352 bytes left [ 44.019941][ T3565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 44.037133][ T3553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.636108][ T28] kauditd_printk_skb: 228 callbacks suppressed [ 44.636134][ T28] audit: type=1400 audit(1773851310.880:329): avc: denied { create } for pid=3554 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.040357][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.089706][ T28] audit: type=1400 audit(1773851310.930:330): avc: denied { create } for pid=3571 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 45.496329][ T28] audit: type=1400 audit(1773851310.930:331): avc: denied { connect } for pid=3571 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 45.545318][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.639980][ T28] audit: type=1400 audit(1773851310.980:332): avc: denied { write } for pid=3571 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 45.682899][ T3586] loop2: detected capacity change from 0 to 512 [ 45.707484][ T3586] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.745341][ T28] audit: type=1326 audit(1773851311.080:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3571 comm="syz.2.22" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44da1dc799 code=0x0 [ 45.798386][ T3586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.865192][ T3586] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.944427][ T3586] EXT4-fs (loop2): 1 truncate cleaned up [ 45.984001][ T28] audit: type=1400 audit(1773851311.140:334): avc: denied { read } for pid=3571 comm="syz.2.22" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.985749][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.067980][ T28] audit: type=1400 audit(1773851311.140:335): avc: denied { open } for pid=3571 comm="syz.2.22" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.176631][ T3590] loop0: detected capacity change from 0 to 4096 [ 46.203112][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.260542][ T3555] lo speed is unknown, defaulting to 1000 [ 46.629785][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.739465][ T3598] loop3: detected capacity change from 0 to 512 [ 46.848484][ T3610] program syz.4.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.882134][ T3598] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.27: bg 0: block 5: invalid block bitmap [ 46.978927][ T3598] loop3: lost filesystem error report for type 5 error -117 [ 46.988270][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 47.003429][ C0] EXT4-fs (loop3): initial error at time 1773851313: ext4_validate_block_bitmap:432 [ 47.014276][ C0] EXT4-fs (loop3): last error at time 1773851313: ext4_validate_block_bitmap:432 [ 47.027920][ T3598] ------------[ cut here ]------------ [ 47.035167][ T3598] EA inode 11 i_nlink=2 [ 47.035525][ T3598] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.27/3598 [ 47.054599][ T3598] Modules linked in: [ 47.060902][ T3598] CPU: 0 UID: 0 PID: 3598 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(full) [ 47.071324][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.082580][ T28] audit: type=1400 audit(1773851311.140:336): avc: denied { map } for pid=3571 comm="syz.2.22" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.082621][ T28] audit: type=1400 audit(1773851311.140:337): avc: denied { execute } for pid=3571 comm="syz.2.22" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.082701][ T28] audit: type=1400 audit(1773851311.140:338): avc: denied { ioctl } for pid=3571 comm="syz.2.22" path="/dev/usbmon8" dev="devtmpfs" ino=166 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.166944][ T3598] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 47.175306][ T3598] Code: 74 46 99 ff 4c 8d 2d ed ac 5d 05 49 8d 7e 40 e8 14 e0 b5 ff 49 8b 6e 40 4c 89 e7 e8 48 db b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 6f 87 dd 03 66 66 66 66 66 66 2e [ 47.199024][ T3598] RSP: 0018:ffffc900018cf778 EFLAGS: 00010246 [ 47.206396][ T3598] RAX: ffff8881050f9b88 RBX: ffff88811a060a68 RCX: ffffffff81c01828 [ 47.215875][ T3598] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc500 [ 47.225254][ T3598] RBP: 000000000000000b R08: 000188811a060a1b R09: 0000000000000000 [ 47.234626][ T3598] R10: ffffc900018cf6a8 R11: 0001c900018cf6a8 R12: ffff88811a060a18 [ 47.243954][ T3598] R13: ffffffff871dc500 R14: ffff88811a0609d0 R15: 0000000000000001 [ 47.253284][ T3598] FS: 00007f3ca491f6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 47.263436][ T3598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.271135][ T3598] CR2: 0000000034747865 CR3: 000000011aac6000 CR4: 00000000003506f0 [ 47.280243][ T3598] Call Trace: [ 47.284495][ T3598] [ 47.288176][ T3598] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 47.294874][ T3598] ? errseq_check+0x2c/0x50 [ 47.300184][ T3598] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 47.306377][ T3598] ext4_evict_inode+0xa1f/0xd60 [ 47.312303][ T3598] ? __pfx_ext4_evict_inode+0x10/0x10 [ 47.319544][ T3598] evict+0x2af/0x510 [ 47.324417][ T3598] ? __pfx_ext4_drop_inode+0x10/0x10 [ 47.330246][ T3598] ? iput+0x1ea/0x580 [ 47.335565][ T3598] iput+0x41a/0x580 [ 47.339963][ T3598] ext4_process_orphan+0x1a9/0x1c0 [ 47.345983][ T3598] ext4_orphan_cleanup+0x6a8/0xa00 [ 47.352583][ T3598] ext4_fill_super+0x3408/0x37c0 [ 47.358822][ T3598] ? set_blocksize+0x14c/0x270 [ 47.364573][ T3598] ? setup_bdev_super+0x30e/0x370 [ 47.370777][ T3598] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.377205][ T3598] get_tree_bdev_flags+0x291/0x300 [ 47.383445][ T3598] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.390665][ T3598] get_tree_bdev+0x1f/0x30 [ 47.397095][ T3598] ext4_get_tree+0x1c/0x30 [ 47.402276][ T3598] vfs_get_tree+0x57/0x1d0 [ 47.407713][ T3598] do_new_mount+0x288/0x8d0 [ 47.413365][ T3598] path_mount+0x4d0/0xbc0 [ 47.419694][ T3598] __se_sys_mount+0x28c/0x2e0 [ 47.426124][ T3598] __x64_sys_mount+0x67/0x80 [ 47.432126][ T3598] x64_sys_call+0x2d61/0x3020 [ 47.438416][ T3598] do_syscall_64+0x12c/0x370 [ 47.444183][ T3598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.451094][ T3598] RIP: 0033:0x7f3ca5ecda0a [ 47.456094][ T3598] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.477289][ T3598] RSP: 002b:00007f3ca491ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.487836][ T3598] RAX: ffffffffffffffda RBX: 00007f3ca491eee0 RCX: 00007f3ca5ecda0a [ 47.498724][ T3598] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f3ca491eea0 [ 47.507992][ T3598] RBP: 00002000000009c0 R08: 00007f3ca491eee0 R09: 0000000000800718 [ 47.517069][ T3598] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 47.526529][ T3598] R13: 00007f3ca491eea0 R14: 000000000000048d R15: 0000200000000200 [ 47.538366][ T3598] [ 47.541735][ T3598] ---[ end trace 0000000000000000 ]--- [ 47.615359][ T3615] loop1: detected capacity change from 0 to 512 [ 47.660861][ T3598] EXT4-fs (loop3): 1 orphan inode deleted [ 47.829690][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.962161][ T3615] EXT4-fs (loop1): 1 orphan inode deleted [ 47.987228][ T3615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.003416][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.015490][ T3629] serio: Serial port ttyS3 [ 48.026781][ T3634] loop4: detected capacity change from 0 to 1024 [ 48.034929][ T3634] EXT4-fs: inline encryption not supported [ 48.042460][ T3634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.139792][ T3634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.187439][ T3598] syz.3.27 (3598) used greatest stack depth: 9224 bytes left [ 48.211896][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.422521][ T3642] loop2: detected capacity change from 0 to 1024 [ 48.438801][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.460147][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.525072][ T3662] loop0: detected capacity change from 0 to 256 [ 48.889689][ T3642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.410371][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.460913][ T3629] IPVS: persistence engine module ip_vs_pe_ not found [ 49.539456][ T3680] loop3: detected capacity change from 0 to 512 [ 49.666210][ T3688] loop4: detected capacity change from 0 to 512 [ 49.677026][ T3689] loop2: detected capacity change from 0 to 1024 [ 49.707251][ T3689] EXT4-fs: inline encryption not supported [ 49.744077][ T3689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.289076][ T3688] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (9000000) [ 50.300485][ T3680] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.45: invalid indirect mapped block 256 (level 2) [ 50.317738][ T3688] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 50.322203][ T3689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.343221][ T3680] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.343610][ T3680] EXT4-fs (loop3): 2 truncates cleaned up [ 50.353076][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 50.353107][ C1] EXT4-fs (loop3): initial error at time 1773851316: ext4_free_branches:1023: inode 11 [ 50.353160][ C1] EXT4-fs (loop3): last error at time 1773851316: ext4_free_branches:1023: inode 11 [ 50.371840][ T3688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.380062][ T3680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.502805][ T3697] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.45: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 50.536663][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 50.536684][ T28] audit: type=1400 audit(1773851316.750:361): avc: denied { link } for pid=3675 comm="syz.3.45" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.599832][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.148402][ T28] audit: type=1400 audit(1773851316.950:362): avc: denied { read append } for pid=3694 comm="syz.0.49" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.175035][ T28] audit: type=1400 audit(1773851316.950:363): avc: denied { open } for pid=3694 comm="syz.0.49" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.218616][ T28] audit: type=1326 audit(1773851317.160:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820c9c799 code=0x7ffc0000 [ 51.248295][ T28] audit: type=1326 audit(1773851317.160:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820c9c799 code=0x7ffc0000 [ 51.270317][ T3703] netlink: 'syz.4.50': attribute type 21 has an invalid length. [ 51.282261][ T28] audit: type=1326 audit(1773851317.170:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb820c9c799 code=0x7ffc0000 [ 51.357646][ T28] audit: type=1326 audit(1773851317.190:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820c9c799 code=0x7ffc0000 [ 51.383271][ T28] audit: type=1326 audit(1773851317.200:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820c9c799 code=0x7ffc0000 [ 51.383309][ T28] audit: type=1326 audit(1773851317.200:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb820c9c799 code=0x7ffc0000 [ 51.383378][ T28] audit: type=1326 audit(1773851317.210:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820c9c799 code=0x7ffc0000 [ 51.389204][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.532962][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.812107][ T3732] hub 8-0:1.0: USB hub found [ 51.819656][ T3732] hub 8-0:1.0: 8 ports detected [ 54.023326][ T3732] netlink: 'syz.3.59': attribute type 36 has an invalid length. [ 54.042883][ T3732] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 54.053267][ T3732] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 54.074134][ T3732] netlink: 'syz.3.59': attribute type 10 has an invalid length. [ 54.082451][ T3732] macvlan1: entered allmulticast mode [ 54.091949][ T3732] veth1_vlan: entered allmulticast mode [ 54.102832][ T3732] team0: Port device macvlan1 added [ 54.355165][ T3740] program syz.2.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.395022][ T3742] loop3: detected capacity change from 0 to 1024 [ 54.447704][ T3742] EXT4-fs: inline encryption not supported [ 54.468743][ T3742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.528779][ T3742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.587775][ T3744] loop4: detected capacity change from 0 to 4096 [ 54.616880][ T3753] loop0: detected capacity change from 0 to 4096 [ 54.625631][ T3744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.641134][ T3753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.718534][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.718569][ T3757] loop2: detected capacity change from 0 to 1024 [ 54.720119][ T3757] EXT4-fs: inline encryption not supported [ 54.758930][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.788370][ T3757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.826792][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.982875][ T3773] loop0: detected capacity change from 0 to 128 [ 54.991427][ T3773] vfat: Bad value for 'shortname' [ 55.125568][ T3778] program syz.0.72 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.276445][ T3782] loop0: detected capacity change from 0 to 2048 [ 55.287704][ T3782] EXT4-fs: Ignoring removed oldalloc option [ 55.338495][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.347809][ T3783] netlink: 'syz.1.74': attribute type 21 has an invalid length. [ 55.358716][ T3782] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 55.369928][ T3782] System zones: 0-7 [ 55.401112][ T3782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.492447][ T3782] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.73: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.608416][ T3782] EXT4-fs (loop0): Remounting filesystem read-only [ 55.678718][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 55.678736][ T28] audit: type=1400 audit(1773851321.920:434): avc: denied { create } for pid=3779 comm="syz.0.73" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 55.754705][ T28] audit: type=1400 audit(1773851322.000:435): avc: denied { read } for pid=3779 comm="syz.0.73" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.788415][ T28] audit: type=1400 audit(1773851322.000:436): avc: denied { open } for pid=3779 comm="syz.0.73" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.821702][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.834294][ T3794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.77'. [ 55.882479][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.968853][ T3805] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.79'. [ 55.997313][ T28] audit: type=1400 audit(1773851322.240:437): avc: denied { create } for pid=3799 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.021080][ T3805] bridge_slave_1: default FDB implementation only supports local addresses [ 56.239176][ T3821] loop2: detected capacity change from 0 to 512 [ 56.259477][ T3817] program syz.0.83 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.296887][ T3821] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 56.419049][ T28] audit: type=1326 audit(1773851322.660:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 56.496634][ T28] audit: type=1326 audit(1773851322.700:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 56.522689][ T28] audit: type=1326 audit(1773851322.700:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 56.524706][ T28] audit: type=1326 audit(1773851322.770:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 56.524736][ T28] audit: type=1326 audit(1773851322.770:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 56.623373][ T28] audit: type=1326 audit(1773851322.850:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 56.688559][ T3825] netlink: 'syz.0.86': attribute type 21 has an invalid length. [ 56.826895][ T3837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.91'. [ 57.027644][ T3847] Zero length message leads to an empty skb [ 57.200935][ T3852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.96'. [ 57.343927][ T3856] loop0: detected capacity change from 0 to 1024 [ 57.352192][ T3856] EXT4-fs: inline encryption not supported [ 57.367509][ T3856] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.378959][ T3856] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 57.396723][ T3858] loop3: detected capacity change from 0 to 1024 [ 57.419806][ T3858] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.459122][ T3858] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 57.486407][ T3858] EXT4-fs (loop3): invalid journal inode [ 57.499705][ T3858] EXT4-fs (loop3): can't get journal size [ 57.512903][ T3858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.527603][ T3858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.99'. [ 57.582060][ T3858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.99'. [ 57.649116][ T3858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.99'. [ 57.748662][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.758865][ T3874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.106'. [ 57.803466][ T3871] netlink: 'syz.0.101': attribute type 21 has an invalid length. [ 57.992516][ T3885] loop2: detected capacity change from 0 to 4096 [ 58.040528][ T3885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.161134][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.198895][ T3895] FAULT_INJECTION: forcing a failure. [ 58.198895][ T3895] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.242544][ T3895] CPU: 0 UID: 0 PID: 3895 Comm: syz.3.112 Tainted: G W syzkaller #0 PREEMPT(full) [ 58.242585][ T3895] Tainted: [W]=WARN [ 58.242605][ T3895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.242620][ T3895] Call Trace: [ 58.242633][ T3895] [ 58.242640][ T3895] __dump_stack+0x1d/0x30 [ 58.242694][ T3895] dump_stack_lvl+0x95/0xd0 [ 58.242719][ T3895] dump_stack+0x15/0x1b [ 58.242770][ T3895] should_fail_ex+0x263/0x280 [ 58.242863][ T3895] should_fail+0xb/0x20 [ 58.242887][ T3895] should_fail_usercopy+0x1a/0x20 [ 58.242917][ T3895] _copy_from_user+0x1c/0xb0 [ 58.243073][ T3895] ___sys_sendmsg+0xc1/0x1e0 [ 58.243141][ T3895] __x64_sys_sendmsg+0xd4/0x160 [ 58.243179][ T3895] x64_sys_call+0x194c/0x3020 [ 58.243261][ T3895] do_syscall_64+0x12c/0x370 [ 58.243288][ T3895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.243350][ T3895] RIP: 0033:0x7f3ca5ecc799 [ 58.243368][ T3895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.243391][ T3895] RSP: 002b:00007f3ca491f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.243414][ T3895] RAX: ffffffffffffffda RBX: 00007f3ca6145fa0 RCX: 00007f3ca5ecc799 [ 58.243433][ T3895] RDX: 0000000000000040 RSI: 0000200000000c40 RDI: 0000000000000003 [ 58.243496][ T3895] RBP: 00007f3ca491f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.243512][ T3895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.243594][ T3895] R13: 00007f3ca6146038 R14: 00007f3ca6145fa0 R15: 00007ffcd142e708 [ 58.243629][ T3895] [ 58.493202][ T3906] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 58.501435][ T3906] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 58.662388][ T3921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.688056][ T3920] netlink: 'syz.1.122': attribute type 21 has an invalid length. [ 58.779606][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.873435][ T3957] bridge_slave_0: left allmulticast mode [ 59.900211][ T3957] bridge_slave_0: left promiscuous mode [ 59.917813][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.950409][ T3957] bridge_slave_1: left allmulticast mode [ 59.967954][ T3957] bridge_slave_1: left promiscuous mode [ 59.988494][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.025672][ T3957] bond0: (slave bond_slave_0): Releasing backup interface [ 60.058606][ T3957] bond0: (slave bond_slave_1): Releasing backup interface [ 60.098519][ T3957] team0: Port device team_slave_0 removed [ 60.124034][ T3957] team0: Port device team_slave_1 removed [ 60.144436][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.168908][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.195012][ T3957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.221738][ T3957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.251588][ T3957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 60.465438][ T3966] set_capacity_and_notify: 1 callbacks suppressed [ 60.465456][ T3966] loop2: detected capacity change from 0 to 2048 [ 60.539810][ T3966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.669633][ T3966] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.137: bg 0: block 234: padding at end of block bitmap is not set [ 60.692366][ T3971] loop1: detected capacity change from 0 to 4096 [ 60.787302][ T3971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.803238][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 60.803254][ T28] audit: type=1400 audit(1773851327.050:474): avc: denied { create } for pid=3965 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.836144][ T3966] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 314 with error 28 [ 60.857172][ T3971] Quota error (device loop1): do_check_range: Getting block 327680 out of range 0-5 [ 60.890606][ T3966] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.890606][ T3966] [ 60.912059][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.929862][ T3966] EXT4-fs (loop2): Total free blocks count 0 [ 60.936146][ T3966] EXT4-fs (loop2): Free/Dirty block details [ 60.942551][ T3966] EXT4-fs (loop2): free_blocks=0 [ 60.947878][ T3966] EXT4-fs (loop2): dirty_blocks=320 [ 60.953301][ T3966] EXT4-fs (loop2): Block reservation details [ 60.959828][ T3966] EXT4-fs (loop2): i_reserved_data_blocks=20 [ 60.970083][ T28] audit: type=1400 audit(1773851327.220:475): avc: denied { bind } for pid=3965 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.999980][ T3976] netlink: 'syz.0.139': attribute type 21 has an invalid length. [ 61.026013][ T28] audit: type=1400 audit(1773851327.260:476): avc: denied { setopt } for pid=3978 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.073269][ T28] audit: type=1400 audit(1773851327.270:477): avc: denied { ioctl } for pid=3978 comm="syz.1.140" path="socket:[5651]" dev="sockfs" ino=5651 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.107957][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.119349][ T28] audit: type=1400 audit(1773851327.320:478): avc: denied { read } for pid=3978 comm="syz.1.140" path="socket:[5650]" dev="sockfs" ino=5650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.218785][ T3936] lo speed is unknown, defaulting to 1000 [ 61.360994][ T3997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3997 comm=syz.0.146 [ 61.818021][ T4007] Illegal XDP return value 123 on prog (id 28) dev N/A, expect packet loss! [ 61.850127][ T4010] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.150'. [ 61.893055][ T4010] bridge_slave_1: default FDB implementation only supports local addresses [ 61.915218][ T4016] netlink: 64 bytes leftover after parsing attributes in process `syz.1.152'. [ 62.013478][ T28] audit: type=1400 audit(1773851328.250:479): avc: denied { bind } for pid=3996 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.181010][ T4039] loop4: detected capacity change from 0 to 1024 [ 62.227080][ T4039] EXT4-fs: inline encryption not supported [ 62.242092][ T4043] netlink: 'syz.2.158': attribute type 3 has an invalid length. [ 62.258520][ T4039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.265659][ T28] audit: type=1400 audit(1773851328.260:480): avc: denied { setopt } for pid=3996 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.271520][ T4041] loop1: detected capacity change from 0 to 1024 [ 62.316817][ T4041] EXT4-fs: inline encryption not supported [ 62.326464][ T28] audit: type=1400 audit(1773851328.260:481): avc: denied { write } for pid=3996 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.336995][ T4041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.374320][ T4039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.397337][ T28] audit: type=1326 audit(1773851328.490:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4027 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 62.466967][ T4055] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.163'. [ 62.476554][ T4055] bridge_slave_1: default FDB implementation only supports local addresses [ 62.489445][ T4041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.074223][ T4085] loop0: detected capacity change from 0 to 1024 [ 63.088846][ T4085] EXT4-fs: inline encryption not supported [ 63.095087][ T4085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.103079][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.129468][ T4087] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 63.133569][ T4085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.159725][ T4087] team0: Device xfrm0 is of different type [ 63.182674][ T4089] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.175'. [ 63.237950][ T4089] bridge_slave_1: default FDB implementation only supports local addresses [ 63.359323][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.533931][ T4112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4112 comm=syz.1.183 [ 63.777497][ T4128] loop2: detected capacity change from 0 to 512 [ 63.798329][ T4128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.939292][ T4128] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.189: corrupted xattr entries [ 63.996707][ T4128] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.998334][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 64.014389][ C1] EXT4-fs (loop2): initial error at time 1773851330: xattr_find_entry:337: inode 15 [ 64.024496][ C1] EXT4-fs (loop2): last error at time 1773851330: xattr_find_entry:337: inode 15 [ 64.060669][ T4128] EXT4-fs (loop2): Remounting filesystem read-only [ 64.090716][ T4128] EXT4-fs (loop2): 1 truncate cleaned up [ 64.097064][ T4128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.123703][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.244518][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.258893][ T4141] loop4: detected capacity change from 0 to 4096 [ 64.475994][ T4141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.835884][ T4181] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.205'. [ 65.871718][ T4181] bridge_slave_1: default FDB implementation only supports local addresses [ 67.156123][ T4209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=126 sclass=netlink_route_socket pid=4209 comm=syz.3.214 [ 68.778073][ T4222] netlink: 'syz.0.217': attribute type 21 has an invalid length. [ 69.413521][ T4227] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.218'. [ 69.443068][ T4227] bridge_slave_1: default FDB implementation only supports local addresses [ 69.627537][ T4230] loop0: detected capacity change from 0 to 1024 [ 69.653571][ T4230] EXT4-fs: inline encryption not supported [ 69.684907][ T4230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.721430][ T4230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.829524][ T4239] loop3: detected capacity change from 0 to 4096 [ 69.872486][ T4239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.944741][ T4239] __quota_error: 17 callbacks suppressed [ 69.944773][ T4239] Quota error (device loop3): do_check_range: Getting block 327680 out of range 0-5 [ 70.114596][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.144687][ T4250] loop2: detected capacity change from 0 to 1024 [ 70.152023][ T4250] EXT4-fs: Ignoring removed orlov option [ 70.207677][ T4250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.229308][ T4250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 70.242168][ T4255] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 70.250904][ T4255] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 71.217159][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.306986][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.333308][ T4267] netlink: 'syz.2.231': attribute type 21 has an invalid length. [ 71.367434][ T4265] loop1: detected capacity change from 0 to 512 [ 71.519679][ T4279] loop2: detected capacity change from 0 to 1024 [ 71.533801][ T4279] EXT4-fs: inline encryption not supported [ 71.598540][ T4279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.672141][ T4279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.774948][ T4285] serio: Serial port ttyS3 [ 72.094333][ T4285] netlink: 'syz.3.236': attribute type 3 has an invalid length. [ 72.346400][ T4297] serio: Serial port ttyS3 [ 72.984749][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.043303][ T4306] loop3: detected capacity change from 0 to 1024 [ 73.075166][ T4306] EXT4-fs: inline encryption not supported [ 73.104955][ T4306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.141621][ T4306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.415605][ T4313] program syz.0.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.465173][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.486126][ T4315] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.240'. [ 73.512447][ T4315] bridge_slave_1: default FDB implementation only supports local addresses [ 73.655877][ T4324] netlink: 'syz.4.245': attribute type 21 has an invalid length. [ 73.795043][ T4332] loop1: detected capacity change from 0 to 256 [ 73.868952][ T4332] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.918787][ T4332] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 73.927104][ T4332] FAT-fs (loop1): Filesystem has been set read-only [ 74.273167][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.397186][ T4346] loop0: detected capacity change from 0 to 1024 [ 74.416707][ T4346] EXT4-fs: inline encryption not supported [ 74.437556][ T4346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.459834][ T4346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.582465][ T28] audit: type=1326 audit(1773851340.820:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 74.808177][ T28] audit: type=1326 audit(1773851340.820:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.125392][ T28] audit: type=1326 audit(1773851340.820:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.355124][ T28] audit: type=1326 audit(1773851340.820:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.470219][ T28] audit: type=1326 audit(1773851340.820:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.579158][ T28] audit: type=1326 audit(1773851340.820:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.648291][ T28] audit: type=1326 audit(1773851340.820:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.716698][ T28] audit: type=1326 audit(1773851340.820:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.771467][ T4366] netlink: 'syz.4.260': attribute type 21 has an invalid length. [ 75.788288][ T28] audit: type=1326 audit(1773851340.820:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.838302][ T28] audit: type=1326 audit(1773851340.820:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.880454][ T28] audit: type=1326 audit(1773851340.820:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 75.905584][ T28] audit: type=1326 audit(1773851340.820:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4355 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 76.371508][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.131848][ T4395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.270'. [ 77.454303][ T4402] loop2: detected capacity change from 0 to 256 [ 77.798883][ T4408] lo speed is unknown, defaulting to 1000 [ 78.133183][ T4409] lo speed is unknown, defaulting to 1000 [ 78.150292][ T4410] loop1: detected capacity change from 0 to 2048 [ 78.249449][ T4408] loop1: detected capacity change from 0 to 128 [ 78.269977][ T4408] vfat: Unknown parameter '184467440737095516156ɲ  1s{T6+`N+%{aZI֝`1 [ 78.269977][ T4408] wMOAy%(4abV۾8_Kׂ(W6>$BZ' [ 78.738624][ T4416] netlink: 'syz.4.274': attribute type 21 has an invalid length. [ 79.075953][ T4418] syz.1.275 uses obsolete (PF_INET,SOCK_PACKET) [ 79.281455][ T4429] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.280'. [ 79.312602][ T4429] bridge_slave_1: default FDB implementation only supports local addresses [ 79.349348][ T4436] loop4: detected capacity change from 0 to 164 [ 79.360121][ T4438] loop0: detected capacity change from 0 to 256 [ 79.400415][ T4438] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.429735][ T4436] Unsupported NM flag settings (240) [ 79.439187][ T4438] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 79.466441][ T4438] FAT-fs (loop0): Filesystem has been set read-only [ 79.545439][ T4438] netlink: 80 bytes leftover after parsing attributes in process `syz.0.284'. [ 79.625613][ T4450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.289'. [ 79.783543][ T4455] lo speed is unknown, defaulting to 1000 [ 79.847504][ T4463] loop4: detected capacity change from 0 to 2048 [ 79.893496][ T4463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.917264][ T4469] netlink: 'syz.1.293': attribute type 21 has an invalid length. [ 79.955336][ T4463] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.982646][ T4473] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.297'. [ 79.992717][ T4473] bridge_slave_1: default FDB implementation only supports local addresses [ 80.030703][ T4475] loop2: detected capacity change from 0 to 512 [ 80.098595][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.099408][ T4475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.114990][ T4481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 80.152653][ T4475] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.153997][ T4481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 80.175291][ T4481] ip6gretap0: entered promiscuous mode [ 80.182319][ T4481] syz_tun: entered promiscuous mode [ 80.209077][ T4475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.380044][ T4492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.304'. [ 80.482793][ T4502] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.310'. [ 80.592342][ T4512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 80.612589][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 80.612605][ T28] audit: type=1400 audit(1773851346.860:525): avc: denied { module_request } for pid=4493 comm="syz.1.305" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.644053][ T4502] bridge_slave_1: default FDB implementation only supports local addresses [ 80.773608][ T4508] netlink: 'syz.2.309': attribute type 21 has an invalid length. [ 80.823403][ T4518] program syz.4.313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.871493][ T4521] loop3: detected capacity change from 0 to 256 [ 80.925232][ T4521] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.979641][ T4521] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 81.002936][ T4521] FAT-fs (loop3): Filesystem has been set read-only [ 81.478144][ T4526] loop0: detected capacity change from 0 to 256 [ 81.490516][ T4526] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.508173][ T4526] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 81.517919][ T4526] FAT-fs (loop0): Filesystem has been set read-only [ 81.770507][ T28] audit: type=1400 audit(1773851348.020:526): avc: denied { mounton } for pid=4528 comm="syz.3.317" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 81.797175][ T4531] tmpfs: Unknown parameter '' [ 82.082009][ T4533] loop0: detected capacity change from 0 to 4096 [ 82.096149][ T4533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.124240][ T4533] Quota error (device loop0): do_check_range: Getting block 327680 out of range 0-5 [ 82.245422][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.410334][ T4547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.321'. [ 82.706516][ T4551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 82.843055][ T4554] program syz.3.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.017774][ T4562] tipc: Enabling of bearer rejected, failed to enable media [ 83.643955][ T4563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=235 sclass=netlink_route_socket pid=4563 comm=syz.2.326 [ 83.785801][ T4579] loop4: detected capacity change from 0 to 256 [ 87.421957][ T4603] program syz.4.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.632201][ T4604] loop0: detected capacity change from 0 to 512 [ 87.703948][ T28] audit: type=1326 audit(1773851353.950:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 87.788732][ T4604] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.336: bg 0: block 128: invalid block bitmap [ 87.830917][ T28] audit: type=1326 audit(1773851353.950:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 87.884235][ T4604] loop0: lost filesystem error report for type 5 error -117 [ 87.888260][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 87.905702][ C1] EXT4-fs (loop0): initial error at time 1773851354: ext4_validate_block_bitmap:432 [ 87.916117][ C1] EXT4-fs (loop0): last error at time 1773851354: ext4_validate_block_bitmap:432 [ 87.934513][ T4606] netlink: 'syz.3.340': attribute type 21 has an invalid length. [ 87.945392][ T28] audit: type=1326 audit(1773851353.980:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 87.946012][ T4604] EXT4-fs (loop0): 1 orphan inode deleted [ 87.972255][ T28] audit: type=1326 audit(1773851353.980:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 88.001825][ T28] audit: type=1326 audit(1773851353.980:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 88.001860][ T28] audit: type=1326 audit(1773851353.980:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 88.001922][ T28] audit: type=1326 audit(1773851353.980:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 88.001948][ T28] audit: type=1326 audit(1773851353.980:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 88.001978][ T28] audit: type=1326 audit(1773851353.980:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 88.002012][ T28] audit: type=1326 audit(1773851353.980:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca5ecc799 code=0x7ffc0000 [ 88.002961][ T4604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.305389][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.365119][ T4624] loop3: detected capacity change from 0 to 512 [ 88.413070][ T4624] EXT4-fs: Ignoring removed nobh option [ 88.437188][ T4627] loop4: detected capacity change from 0 to 128 [ 88.437217][ T4624] EXT4-fs (loop3): 1 truncate cleaned up [ 88.459854][ T4624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.514413][ T4632] program syz.2.349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.556920][ T4627] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.633461][ T4627] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.441633][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.565843][ T4663] loop2: detected capacity change from 0 to 1024 [ 89.575974][ T4663] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.594063][ T4663] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 89.618512][ T4663] EXT4-fs (loop2): invalid journal inode [ 89.625908][ T4663] EXT4-fs (loop2): can't get journal size [ 89.648159][ T4663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.688000][ T4663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.360'. [ 89.741281][ T4670] program syz.1.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.762908][ T4663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.360'. [ 89.785831][ T4668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=179 sclass=netlink_route_socket pid=4668 comm=syz.4.357 [ 89.901663][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.009067][ T4663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.360'. [ 90.169894][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.345627][ T4691] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 90.390859][ T4691] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.513581][ T4698] program syz.3.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.526749][ T4699] netlink: 'syz.2.368': attribute type 21 has an invalid length. [ 90.626252][ T4707] loop0: detected capacity change from 0 to 256 [ 90.641961][ T4711] loop1: detected capacity change from 0 to 256 [ 90.665763][ T4707] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.687833][ T4711] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.714494][ T4707] netlink: 80 bytes leftover after parsing attributes in process `syz.0.377'. [ 90.734980][ T4711] netlink: 80 bytes leftover after parsing attributes in process `syz.1.378'. [ 90.860875][ T4717] netlink: 80 bytes leftover after parsing attributes in process `syz.4.380'. [ 91.243811][ T4717] ipip0: entered promiscuous mode [ 91.375664][ T4731] program syz.4.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.469415][ T4735] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.386'. [ 91.495686][ T4735] bridge_slave_1: default FDB implementation only supports local addresses [ 91.636888][ T4743] netlink: 'syz.3.391': attribute type 21 has an invalid length. [ 91.729587][ T4753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=206 sclass=netlink_route_socket pid=4753 comm=syz.0.390 [ 92.024719][ T4760] program syz.3.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.305193][ T4771] loop1: detected capacity change from 0 to 256 [ 92.334125][ T4771] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.411065][ T4771] netlink: 80 bytes leftover after parsing attributes in process `syz.1.402'. [ 92.578148][ T4784] loop0: detected capacity change from 0 to 1024 [ 92.610121][ T4784] EXT4-fs: inline encryption not supported [ 92.637186][ T4784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.676575][ T4786] netlink: 'syz.4.407': attribute type 21 has an invalid length. [ 92.685669][ T4775] loop2: detected capacity change from 0 to 32768 [ 92.688619][ T4784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.787446][ T4795] loop3: detected capacity change from 0 to 1024 [ 92.807019][ T4795] EXT4-fs: inline encryption not supported [ 92.824211][ T4795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.839952][ T4795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.483989][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.616702][ T4819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=205 sclass=netlink_route_socket pid=4819 comm=syz.4.414 [ 93.656613][ T4820] loop1: detected capacity change from 0 to 512 [ 93.687972][ T4811] loop2: detected capacity change from 0 to 512 [ 93.768019][ T4820] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.417: invalid indirect mapped block 256 (level 2) [ 93.804180][ T4811] FAT-fs (loop2): bogus number of FAT sectors [ 93.852965][ T4811] FAT-fs (loop2): Can't find a valid FAT filesystem [ 93.890950][ T4820] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 93.891463][ T4820] EXT4-fs (loop1): 2 truncates cleaned up [ 93.903504][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 93.903532][ C0] EXT4-fs (loop1): initial error at time 1773851360: ext4_free_branches:1023: inode 11 [ 93.903578][ C0] EXT4-fs (loop1): last error at time 1773851360: ext4_free_branches:1023: inode 11 [ 94.099085][ T4820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.239753][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.308831][ T4827] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.417: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 94.353633][ T4811] loop2: detected capacity change from 0 to 512 [ 94.395666][ T4833] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.417771][ T4811] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.447203][ T4833] netlink: 80 bytes leftover after parsing attributes in process `syz.4.421'. [ 94.461980][ T4811] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 94.490285][ T4811] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 94.509231][ T4811] System zones: 0-2, 18-18, 34-35 [ 94.534325][ T4837] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.422'. [ 94.545916][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.560279][ T4811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.562659][ T4837] bridge_slave_1: default FDB implementation only supports local addresses [ 94.592040][ T28] kauditd_printk_skb: 175 callbacks suppressed [ 94.592103][ T28] audit: type=1400 audit(1773851360.840:712): avc: denied { remount } for pid=4810 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 94.627969][ T4811] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 94.672133][ T4811] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 94.725338][ T4811] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 94.791675][ T4849] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 94.826441][ T4851] set_capacity_and_notify: 1 callbacks suppressed [ 94.826466][ T4851] loop3: detected capacity change from 0 to 1024 [ 94.864195][ T4851] EXT4-fs: inline encryption not supported [ 94.870592][ T4851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.953579][ T4851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.981542][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.443705][ T4869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4869 comm=syz.2.429 [ 96.092589][ T4872] program syz.0.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.126612][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.142114][ T4879] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.434'. [ 97.214949][ T4879] bridge_slave_1: default FDB implementation only supports local addresses [ 97.618806][ T4899] loop2: detected capacity change from 0 to 256 [ 97.651993][ T4899] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.666264][ T4901] program syz.0.443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.778623][ T4899] netlink: 80 bytes leftover after parsing attributes in process `syz.2.442'. [ 98.507380][ T4929] loop4: detected capacity change from 0 to 2048 [ 98.600693][ T4929] EXT4-fs: Ignoring removed oldalloc option [ 98.669408][ T4929] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 98.713046][ T4929] System zones: 0-7 [ 98.775416][ T4929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.830908][ T4929] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.454: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 98.868539][ T4929] EXT4-fs (loop4): Remounting filesystem read-only [ 98.968393][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.418685][ T4950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=285 sclass=netlink_route_socket pid=4950 comm=syz.3.457 [ 99.971835][ T4973] loop1: detected capacity change from 0 to 512 [ 100.152847][ T4973] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 100.207240][ T4973] System zones: 0-2, 18-18, 34-34 [ 100.333088][ T4973] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.468: bg 0: block 248: padding at end of block bitmap is not set [ 100.546046][ T4973] loop1: lost filesystem error report for type 5 error -117 [ 100.548036][ T4973] Quota error (device loop1): write_blk: dquota write failed [ 100.565009][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 100.565041][ C1] EXT4-fs (loop1): last error at time 1773851366: ext4_validate_block_bitmap:441 [ 100.847297][ T28] audit: type=1326 audit(1773851367.090:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 100.885806][ T4973] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 100.896269][ T4973] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.468: Failed to acquire dquot type 1 [ 100.908153][ T4973] loop1: lost filesystem error report for type 5 error -117 [ 100.908309][ T28] audit: type=1326 audit(1773851367.090:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 100.946004][ T4973] EXT4-fs (loop1): 1 truncate cleaned up [ 100.952304][ T4973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.965352][ T28] audit: type=1326 audit(1773851367.090:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 100.989569][ T4973] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.000344][ T28] audit: type=1326 audit(1773851367.090:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 101.024517][ T28] audit: type=1326 audit(1773851367.090:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 101.030541][ T4973] netlink: 80 bytes leftover after parsing attributes in process `syz.1.468'. [ 101.062153][ T4990] loop0: detected capacity change from 0 to 1024 [ 101.080310][ T4985] netlink: 'syz.2.470': attribute type 21 has an invalid length. [ 101.094899][ T4990] EXT4-fs: inline encryption not supported [ 101.115995][ T28] audit: type=1326 audit(1773851367.090:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 101.138619][ T4990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.140817][ T28] audit: type=1326 audit(1773851367.090:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 101.191773][ T4990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.229863][ T4992] loop4: detected capacity change from 0 to 1024 [ 101.248624][ T4992] EXT4-fs: inline encryption not supported [ 101.280097][ T4992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.351048][ T4992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.376984][ T28] audit: type=1326 audit(1773851367.090:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44da1dc799 code=0x7ffc0000 [ 101.515595][ T5001] loop2: detected capacity change from 0 to 1024 [ 101.535418][ T5001] EXT4-fs: inline encryption not supported [ 101.554911][ T5001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.609131][ T5001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.682069][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.700670][ T35] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 1 [ 101.713215][ T35] loop1: lost filesystem error report for type 5 error -117 [ 102.003821][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.918632][ T5031] FAULT_INJECTION: forcing a failure. [ 102.918632][ T5031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.949327][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.991373][ T5031] CPU: 1 UID: 0 PID: 5031 Comm: syz.1.486 Tainted: G W syzkaller #0 PREEMPT(full) [ 102.991460][ T5031] Tainted: [W]=WARN [ 102.991469][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.991485][ T5031] Call Trace: [ 102.991566][ T5031] [ 102.991577][ T5031] __dump_stack+0x1d/0x30 [ 102.991606][ T5031] dump_stack_lvl+0x95/0xd0 [ 102.991638][ T5031] dump_stack+0x15/0x1b [ 102.991667][ T5031] should_fail_ex+0x263/0x280 [ 102.991757][ T5031] should_fail+0xb/0x20 [ 102.991783][ T5031] should_fail_usercopy+0x1a/0x20 [ 102.991839][ T5031] _copy_to_user+0x20/0xa0 [ 102.991880][ T5031] simple_read_from_buffer+0xb5/0x130 [ 102.991911][ T5031] proc_fail_nth_read+0x10e/0x150 [ 102.991944][ T5031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.992017][ T5031] vfs_read+0x1ab/0x7f0 [ 102.992055][ T5031] ? __rcu_read_unlock+0x4e/0x70 [ 102.992084][ T5031] ? __fget_files+0x184/0x1c0 [ 102.992185][ T5031] ? mutex_lock+0x57/0x90 [ 102.992266][ T5031] ksys_read+0xdc/0x1a0 [ 102.992301][ T5031] __x64_sys_read+0x40/0x50 [ 102.992318][ T5031] x64_sys_call+0x2886/0x3020 [ 102.992352][ T5031] do_syscall_64+0x12c/0x370 [ 102.992418][ T5031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.992513][ T5031] RIP: 0033:0x7f5b6d73cfce [ 102.992534][ T5031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.992555][ T5031] RSP: 002b:00007f5b6c1d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.992575][ T5031] RAX: ffffffffffffffda RBX: 00007f5b6c1d76c0 RCX: 00007f5b6d73cfce [ 102.992635][ T5031] RDX: 000000000000000f RSI: 00007f5b6c1d70a0 RDI: 0000000000000004 [ 102.992647][ T5031] RBP: 00007f5b6c1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.992680][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.992696][ T5031] R13: 00007f5b6d9f6038 R14: 00007f5b6d9f5fa0 R15: 00007ffe10f45fa8 [ 102.992723][ T5031] [ 103.323663][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.294105][ T5068] loop0: detected capacity change from 0 to 512 [ 104.386533][ T5068] FAT-fs (loop0): bogus number of FAT sectors [ 104.401311][ T5068] FAT-fs (loop0): Can't find a valid FAT filesystem [ 104.499386][ T5063] loop0: detected capacity change from 0 to 512 [ 104.567079][ T5063] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.693754][ T5078] loop1: detected capacity change from 0 to 4096 [ 104.702984][ T5063] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 104.709536][ T5078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.734449][ T5063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 104.740589][ T5081] netlink: 'syz.4.507': attribute type 21 has an invalid length. [ 104.748637][ T5063] System zones: 0-2, 18-18, 34-35 [ 104.816884][ T5063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 104.868909][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.928587][ T5063] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 104.959570][ T5063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 104.975006][ T5063] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 104.998145][ T5094] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.511'. [ 105.007964][ T5094] bridge_slave_1: default FDB implementation only supports local addresses [ 105.198521][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.310884][ T5123] loop1: detected capacity change from 0 to 512 [ 105.354716][ T5123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.387449][ T5123] EXT4-fs (loop1): 1 orphan inode deleted [ 105.406999][ T5123] EXT4-fs (loop1): 1 truncate cleaned up [ 105.433365][ T5130] loop3: detected capacity change from 0 to 1024 [ 105.434039][ T5123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.461257][ T5123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.533'. [ 105.471643][ T5130] EXT4-fs: inline encryption not supported [ 105.501633][ T5130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.513426][ T5131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=274 sclass=netlink_route_socket pid=5131 comm=syz.0.518 [ 105.538661][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.550275][ T5130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.785196][ T5146] loop2: detected capacity change from 0 to 1024 [ 105.808704][ T5146] EXT4-fs: inline encryption not supported [ 105.815818][ T5146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.827368][ T5149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5149 comm=syz.4.531 [ 105.860758][ T5146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.248962][ T5160] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.261654][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 106.261673][ T28] audit: type=1400 audit(1773851372.510:792): avc: denied { ioctl } for pid=5159 comm="syz.1.536" path="socket:[9033]" dev="sockfs" ino=9033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.338341][ T28] audit: type=1400 audit(1773851372.560:793): avc: denied { map } for pid=5159 comm="syz.1.536" path="socket:[9036]" dev="sockfs" ino=9036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.398726][ T28] audit: type=1400 audit(1773851372.560:794): avc: denied { read } for pid=5159 comm="syz.1.536" path="socket:[9036]" dev="sockfs" ino=9036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.671664][ T28] audit: type=1400 audit(1773851372.860:795): avc: denied { create } for pid=5148 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.733017][ T5177] netlink: 'syz.0.542': attribute type 21 has an invalid length. [ 106.753980][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.812709][ T28] audit: type=1400 audit(1773851372.870:796): avc: denied { bind } for pid=5148 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.833124][ T28] audit: type=1400 audit(1773851372.870:797): avc: denied { setopt } for pid=5148 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.853256][ T28] audit: type=1400 audit(1773851372.870:798): avc: denied { write } for pid=5148 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.894832][ T5180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'. [ 106.897959][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.914112][ T28] audit: type=1326 audit(1773851372.950:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 106.942866][ T28] audit: type=1326 audit(1773851372.950:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 106.968598][ T28] audit: type=1326 audit(1773851372.950:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5176 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 108.300134][ T5214] loop0: detected capacity change from 0 to 512 [ 108.319370][ T5216] netlink: 'syz.2.554': attribute type 21 has an invalid length. [ 108.341183][ T5214] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 108.370076][ T5214] System zones: 0-2, 18-18, 34-34 [ 108.390902][ T5214] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.555: bg 0: block 248: padding at end of block bitmap is not set [ 108.415845][ T5214] loop0: lost filesystem error report for type 5 error -117 [ 108.416088][ T5214] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.555: Failed to acquire dquot type 1 [ 108.423652][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 108.423673][ C1] EXT4-fs (loop0): last error at time 1773851374: ext4_validate_block_bitmap:441 [ 108.459130][ T5219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=285 sclass=netlink_route_socket pid=5219 comm=syz.4.550 [ 108.489466][ T5214] loop0: lost filesystem error report for type 5 error -117 [ 108.506299][ T5214] EXT4-fs (loop0): 1 truncate cleaned up [ 108.519780][ T5214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.548972][ T5214] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.580268][ T5214] netlink: 80 bytes leftover after parsing attributes in process `syz.0.555'. [ 109.700427][ T5230] loop3: detected capacity change from 0 to 512 [ 109.795736][ T5230] EXT4-fs (loop3): 1 orphan inode deleted [ 109.814581][ T5230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.838401][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 109.889457][ T5230] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.011435][ T5246] program syz.2.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.169684][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.193207][ T35] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 1 [ 110.210700][ T35] loop0: lost filesystem error report for type 5 error -117 [ 110.211517][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.170132][ T5266] loop4: detected capacity change from 0 to 4096 [ 111.191410][ T5266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.245792][ T5268] loop1: detected capacity change from 0 to 1024 [ 111.308172][ T5268] EXT4-fs: inline encryption not supported [ 111.413378][ T5268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.427814][ T5275] loop3: detected capacity change from 0 to 1024 [ 111.473788][ T5275] EXT4-fs: inline encryption not supported [ 111.484485][ T5268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.513936][ T5275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.562225][ T5275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.329579][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.468066][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.579257][ T5295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=360 sclass=netlink_route_socket pid=5295 comm=syz.2.577 [ 112.637233][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.712070][ T5298] loop1: detected capacity change from 0 to 1024 [ 112.763252][ T5298] EXT4-fs: inline encryption not supported [ 112.796403][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 112.796465][ T28] audit: type=1326 audit(1773851379.040:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 112.828596][ T5298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.840589][ T28] audit: type=1326 audit(1773851379.080:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 112.865023][ T28] audit: type=1326 audit(1773851379.090:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 112.889788][ T28] audit: type=1326 audit(1773851379.090:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 112.914641][ T28] audit: type=1326 audit(1773851379.090:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 112.939456][ T28] audit: type=1326 audit(1773851379.090:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 113.111021][ T5298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.196016][ T28] audit: type=1326 audit(1773851379.330:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 113.361161][ T28] audit: type=1326 audit(1773851379.340:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 113.454653][ T28] audit: type=1326 audit(1773851379.340:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 113.479999][ T28] audit: type=1326 audit(1773851379.340:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb744afc799 code=0x7ffc0000 [ 113.705810][ T5320] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.584'. [ 113.730104][ T5320] bridge_slave_1: default FDB implementation only supports local addresses [ 113.754442][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.821704][ T5326] loop1: detected capacity change from 0 to 1024 [ 113.829287][ T5326] EXT4-fs: inline encryption not supported [ 113.861828][ T5326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.880304][ T5326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.919650][ T5332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.588'. [ 113.984258][ T5334] loop2: detected capacity change from 0 to 256 [ 114.017870][ T5334] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.034054][ T5336] loop4: detected capacity change from 0 to 1024 [ 114.034364][ T5334] netlink: 80 bytes leftover after parsing attributes in process `syz.2.589'. [ 114.051268][ T5336] EXT4-fs: inline encryption not supported [ 114.057495][ T5336] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.130626][ T5336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.417765][ T5349] loop0: detected capacity change from 0 to 1024 [ 114.442883][ T5351] program syz.3.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.453231][ T5349] EXT4-fs: inline encryption not supported [ 114.459840][ T5349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.481057][ T5349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.698962][ T5349] ================================================================== [ 114.707654][ T5349] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 114.715531][ T5349] [ 114.718086][ T5349] write to 0xffff88811a08e58c of 4 bytes by task 5358 on cpu 1: [ 114.726286][ T5349] __xa_set_mark+0x172/0x1a0 [ 114.731164][ T5349] __folio_mark_dirty+0x383/0x4a0 [ 114.736365][ T5349] mark_buffer_dirty+0x120/0x220 [ 114.741542][ T5349] block_write_end+0x12d/0x210 [ 114.746611][ T5349] ext4_write_end+0x133/0x750 [ 114.751434][ T5349] ext4_da_write_end+0x65/0x810 [ 114.756772][ T5349] generic_perform_write+0x311/0x490 [ 114.762462][ T5349] ext4_buffered_write_iter+0x1ee/0x3c0 [ 114.768239][ T5349] ext4_file_write_iter+0x380/0xfa0 [ 114.773931][ T5349] iter_file_splice_write+0x6c4/0xa80 [ 114.779617][ T5349] direct_splice_actor+0x156/0x2a0 [ 114.785050][ T5349] splice_direct_to_actor+0x311/0x670 [ 114.790655][ T5349] do_splice_direct+0x119/0x1a0 [ 114.795823][ T5349] do_sendfile+0x382/0x650 [ 114.800542][ T5349] __x64_sys_sendfile64+0x105/0x150 [ 114.806165][ T5349] x64_sys_call+0x2dc4/0x3020 [ 114.812328][ T5349] do_syscall_64+0x12c/0x370 [ 114.819434][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.827537][ T5349] [ 114.831119][ T5349] read to 0xffff88811a08e58c of 4 bytes by task 5349 on cpu 0: [ 114.842670][ T5349] xas_find_marked+0x5d7/0x620 [ 114.851659][ T5349] filemap_get_folios_tag+0xfa/0x510 [ 114.858656][ T5349] file_write_and_wait_range+0x20c/0x2f0 [ 114.865042][ T5349] generic_buffers_fsync_noflush+0x45/0x130 [ 114.871567][ T5349] ext4_sync_file+0x1aa/0x6b0 [ 114.877479][ T5349] vfs_fsync_range+0xc5/0xe0 [ 114.882466][ T5349] ext4_buffered_write_iter+0x34f/0x3c0 [ 114.888535][ T5349] ext4_file_write_iter+0x380/0xfa0 [ 114.895168][ T5349] iter_file_splice_write+0x6c4/0xa80 [ 114.901024][ T5349] direct_splice_actor+0x156/0x2a0 [ 114.906372][ T5349] splice_direct_to_actor+0x311/0x670 [ 114.912222][ T5349] do_splice_direct+0x119/0x1a0 [ 114.917211][ T5349] do_sendfile+0x382/0x650 [ 114.921858][ T5349] __x64_sys_sendfile64+0x105/0x150 [ 114.927287][ T5349] x64_sys_call+0x2dc4/0x3020 [ 114.932201][ T5349] do_syscall_64+0x12c/0x370 [ 114.936853][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.942809][ T5349] [ 114.945264][ T5349] value changed: 0x04000021 -> 0x0e000021 [ 114.951452][ T5349] [ 114.953844][ T5349] Reported by Kernel Concurrency Sanitizer on: [ 114.960203][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: syz.0.604 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.971245][ T5349] Tainted: [W]=WARN [ 114.975348][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.986440][ T5349] ================================================================== [ 115.183640][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.206091][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.352393][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.